       (is (= (:status response) 403))
       (is (= (:body response) "Permission denied"))))
 
-  (testing "Jws token unathorized - :unauthorized-handlercalled when provided"
+  (testing "Jws token unathorized with :unauthorized-handlercalled when provided"
     (let [request (make-jws-request jws-data "wrong-key")
           onerror (fn [_ _] {:status 3000})
           backend (token/jws-backend {:secret jws-secret

          response (handler request)]
      (is (= (:status response) 401))))

  (testing "Jwe token authorization - authenticated but unathorized thrown yields 403"
    (let [request (make-jwe-request {:userid 1} jwe-secret)
          handler (-> (fn [req] (throw-unauthorized))
                      (wrap-authorization jwe-backend)

          response (handler request)]
      (is (= (:status response) 3000))))

  (testing "Jws token wrongdata with onerror handler called when provided"
    (let [request (make-jws-request jws-data "wrong-key")
          onerror (fn [_ _] {:status 3000})
          backend (token/jws-backend {:secret jws-secret
